io.mailtrap/mcp

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

• Injection surface

  fail25% of grade

  Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

  tool "send-email" param "to" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "send-email" param name "bcc": names an outbound copy/exfil destination (BCC/exfil verb). tool "send-email" param "bcc" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "batch-send-transactional-email" param "requests" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "batch-send-bulk-email" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "batch-send-bulk-email" param "requests" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "send-sandbox-email" param "to" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "send-sandbox-email" param name "bcc": names an outbound copy/exfil destination (BCC/exfil verb). tool "send-sandbox-email" param "bcc" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "batch-send-sandbox-email" param "requests" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "get-webhook" param "webhook_id" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "create-webhook" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "create-webhook" param "domain_id" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "update-webhook" param "webhook_id" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "delete-webhook" param "webhook_id" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "reply-to-inbound-message" param name "bcc": names an outbound copy/exfil destination (BCC/exfil verb). tool "reply-to-inbound-message" param "bcc" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "reply-all-to-inbound-message" param name "bcc": names an outbound copy/exfil destination (BCC/exfil verb). tool "reply-all-to-inbound-message" param "bcc" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "forward-inbound-message" param name "bcc": names an outbound copy/exfil destination (BCC/exfil verb). tool "forward-inbound-message" param "bcc" description: names an outbound copy/exfil destination (BCC/exfil verb).

• Supply chain

  pass25% of grade

  Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

  repository linkage verified

• Credential hygiene

  pass15% of grade

  How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

  No hardcoded secrets, secret-shaped tool parameters, or leaked keys found. PASS = no static red flag; static analysis cannot prove the code honors env-based secret handling at runtime.

• Permission scope

  pass15% of grade

  Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

  No shell-exec, unbounded/sensitive filesystem, or download-and-run primitives found in scanned source. PASS = no static red flag. Static scanning is blind to code fetched or executed at runtime.

• Version behavior

  fail10% of grade

  Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

  vs prior 0.6.0 (minor bump): new tool "send-email" touches a sensitive surface (email/exec/net/fs); new tool "batch-send-transactional-email" touches a sensitive surface (email/exec/net/fs); new tool "batch-send-bulk-email" whose description contains exfiltration/BCC phrase; new tool "create-template" touches a sensitive surface (email/exec/net/fs); new tool "list-templates" touches a sensitive surface (email/exec/net/fs); new tool "get-template" touches a sensitive surface (email/exec/net/fs); new tool "update-template" touches a sensitive surface (email/exec/net/fs); new tool "delete-template" touches a sensitive surface (email/exec/net/fs); new tool "send-sandbox-email" touches a sensitive surface (email/exec/net/fs); new tool "batch-send-sandbox-email" touches a sensitive surface (email/exec/net/fs); new tool "get-sandbox-messages" appeared; new tool "show-sandbox-email-message" touches a sensitive surface (email/exec/net/fs); new tool "list-sandbox-projects" appeared; new tool "create-sandbox-project" appeared; new tool "get-sandbox-project" touches a sensitive surface (email/exec/net/fs); new tool "update-sandbox-project" appeared; new tool "delete-sandbox-project" touches a sensitive surface (email/exec/net/fs); new tool "create-sandbox-inbox" touches a sensitive surface (email/exec/net/fs); new tool "get-sandbox-inbox" touches a sensitive surface (email/exec/net/fs); new tool "update-sandbox-inbox" touches a sensitive surface (email/exec/net/fs); new tool "delete-sandbox-inbox" touches a sensitive surface (email/exec/net/fs); new tool "clean-sandbox-inbox" touches a sensitive surface (email/exec/net/fs); new tool "list-sandboxes" appeared; new tool "mark-sandbox-as-read" touches a sensitive surface (email/exec/net/fs); new tool "reset-sandbox-credentials" touches a sensitive surface (email/exec/net/fs); new tool "enable-sandbox-email-address" touches a sensitive surface (email/exec/net/fs); new tool "reset-sandbox-email-address" touches a sensitive surface (email/exec/net/fs); new tool "forward-sandbox-message" touches a sensitive surface (email/exec/net/fs); new tool "update-sandbox-message" touches a sensitive surface (email/exec/net/fs); new tool "delete-sandbox-message" touches a sensitive surface (email/exec/net/fs); new tool "get-sandbox-message-spam-score" appeared; new tool "get-sandbox-message-html-analysis" appeared; new tool "get-sandbox-message-headers" touches a sensitive surface (email/exec/net/fs); new tool "get-sandbox-message-html" appeared; new tool "get-sandbox-message-text" appeared; new tool "get-sandbox-message-raw" appeared; new tool "get-sandbox-message-eml" touches a sensitive surface (email/exec/net/fs); new tool "get-sandbox-message-html-source" appeared; new tool "list-sandbox-attachments" appeared; new tool "get-sandbox-attachment" touches a sensitive surface (email/exec/net/fs); new tool "get-sending-stats" touches a sensitive surface (email/exec/net/fs); new tool "list-email-logs" touches a sensitive surface (email/exec/net/fs); new tool "get-email-log-message" touches a sensitive surface (email/exec/net/fs); new tool "list-sending-domains" appeared; new tool "get-sending-domain" appeared; new tool "create-sending-domain" appeared; new tool "update-sending-domain" appeared; new tool "delete-sending-domain" touches a sensitive surface (email/exec/net/fs); new tool "send-sending-domain-setup-instructions" touches a sensitive surface (email/exec/net/fs); new tool "get-company-info" appeared; new tool "create-company-info" appeared; new tool "update-company-info" appeared; new tool "list-suppressions" touches a sensitive surface (email/exec/net/fs); new tool "create-suppression" touches a sensitive surface (email/exec/net/fs); new tool "delete-suppression" touches a sensitive surface (email/exec/net/fs); new tool "list-tracking-opt-outs" touches a sensitive surface (email/exec/net/fs); new tool "create-tracking-opt-out" touches a sensitive surface (email/exec/net/fs); new tool "delete-tracking-opt-out" touches a sensitive surface (email/exec/net/fs); new tool "list-webhooks" appeared; new tool "get-webhook" appeared; new tool "create-webhook" touches a sensitive surface (email/exec/net/fs); new tool "update-webhook" touches a sensitive surface (email/exec/net/fs); new tool "delete-webhook" touches a sensitive surface (email/exec/net/fs); new tool "get-contact" touches a sensitive surface (email/exec/net/fs); new tool "create-contact" touches a sensitive surface (email/exec/net/fs); new tool "update-contact" touches a sensitive surface (email/exec/net/fs); new tool "delete-contact" touches a sensitive surface (email/exec/net/fs); new tool "create-contact-event" touches a sensitive surface (email/exec/net/fs); new tool "list-contact-lists" appeared; new tool "get-contact-list" appeared; new tool "create-contact-list" appeared; new tool "update-contact-list" appeared; new tool "delete-contact-list" touches a sensitive surface (email/exec/net/fs); new tool "list-contact-fields" appeared; new tool "get-contact-field" appeared; new tool "create-contact-field" appeared; new tool "update-contact-field" appeared; new tool "delete-contact-field" touches a sensitive surface (email/exec/net/fs); new tool "create-contact-import" appeared; new tool "get-contact-import" appeared; new tool "create-contact-export" touches a sensitive surface (email/exec/net/fs); new tool "get-contact-export" touches a sensitive surface (email/exec/net/fs); new tool "list-email-campaigns" touches a sensitive surface (email/exec/net/fs); new tool "get-email-campaign" touches a sensitive surface (email/exec/net/fs); new tool "create-email-campaign" touches a sensitive surface (email/exec/net/fs); new tool "update-email-campaign" touches a sensitive surface (email/exec/net/fs); new tool "delete-email-campaign" touches a sensitive surface (email/exec/net/fs); new tool "start-email-campaign" touches a sensitive surface (email/exec/net/fs); new tool "schedule-email-campaign" touches a sensitive surface (email/exec/net/fs); new tool "cancel-email-campaign" touches a sensitive surface (email/exec/net/fs); new tool "terminate-email-campaign" touches a sensitive surface (email/exec/net/fs); new tool "reset-email-campaign" touches a sensitive surface (email/exec/net/fs); new tool "get-email-campaign-stats" touches a sensitive surface (email/exec/net/fs); new tool "list-accounts" appeared; new tool "get-billing-usage" appeared; new tool "list-account-accesses" appeared; new tool "remove-account-access" appeared; new tool "get-permission-resources" appeared; new tool "bulk-update-permissions" appeared; new tool "list-api-tokens" appeared; new tool "create-api-token" touches a sensitive surface (email/exec/net/fs); new tool "get-api-token" touches a sensitive surface (email/exec/net/fs); new tool "reset-api-token" touches a sensitive surface (email/exec/net/fs); new tool "delete-api-token" touches a sensitive surface (email/exec/net/fs); new tool "list-sub-accounts" appeared; new tool "create-sub-account" appeared; new tool "list-inbound-folders" appeared; new tool "get-inbound-folder" appeared; new tool "create-inbound-folder" appeared; new tool "update-inbound-folder" appeared; new tool "delete-inbound-folder" touches a sensitive surface (email/exec/net/fs); new tool "list-inbound-inboxes" appeared; new tool "get-inbound-inbox" appeared; new tool "create-inbound-inbox" appeared; new tool "update-inbound-inbox" appeared; new tool "delete-inbound-inbox" touches a sensitive surface (email/exec/net/fs); new tool "list-inbound-messages" touches a sensitive surface (email/exec/net/fs); new tool "get-inbound-message" touches a sensitive surface (email/exec/net/fs); new tool "delete-inbound-message" touches a sensitive surface (email/exec/net/fs); new tool "reply-to-inbound-message" touches a sensitive surface (email/exec/net/fs); new tool "reply-all-to-inbound-message" touches a sensitive surface (email/exec/net/fs); new tool "forward-inbound-message" touches a sensitive surface (email/exec/net/fs); new tool "list-inbound-threads" touches a sensitive surface (email/exec/net/fs); new tool "get-inbound-thread" appeared; new tool "delete-inbound-thread" touches a sensitive surface (email/exec/net/fs).

• Transport config

  unscannable10% of grade

  Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

  local stdio server: no remote transport or auth surface, and no phone-home/telemetry signal found in source. Absence of transport findings is NOT a safety guarantee — phone-home hosts can be constructed at runtime and defeat static analysis.